CVE-2017-14403

Critical

Published: 13/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The EyesOfNetwork web interface version 5.1-0 has an SQL injection vulnerability via the term parameter in module/admin_group/search.php.

Exploitation of this vulnerability could lead to unauthorized access to the database and exposure of sensitive information.

It is recommended to update to the latest version of the software and implement input data filtering to prevent SQL injection.

Original NVD description (English source)

The EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to module/admin_group/search.php.